28 Configuring Oracle Beehive Integration for Zimbra

Oracle Beehive Integration for Zimbra is installed and configured in the same Oracle home as Oracle Beehive if you have installed Oracle Beehive on a computer with at least 3 gigabytes (GBs) of memory and you select the Server + Client template during the installation process. If you have installed Oracle Beehive Integration for Zimbra in a different Oracle home than your Oracle Beehive instance, then it acts like an application tier and should be configured as such.

If you have not configured TLS or SSL for your Oracle Beehive deployment, you do not need to perform any post-installation steps.

This chapter covers the following topics:

Setting Screen Resolution for Oracle Beehive Integration for Zimbra Client
Configuring Oracle Beehive Integration for Zimbra for SSL-Enabled Oracle Beehive Deployment
Changing HTTP Port for Oracle Beehive Integration for Zimbra

Setting Screen Resolution for Oracle Beehive Integration for Zimbra Client

Ensure that the screen resolution of all computers running the Oracle Beehive Integration for Zimbra client is 1024 x 768 or higher.

Configuring Oracle Beehive Integration for Zimbra for SSL-Enabled Oracle Beehive Deployment

If you have configured TLS or SSL for your Oracle Beehive deployment, follow these steps to configure Oracle Beehive Integration for Zimbra (these steps are similar to "Configuring SSL with Self-Signed Certificates During Installation of Oracle Beehive"):

If you have configured SSL for your Oracle Beehive deployment, ensure that all your Oracle Beehive application tiers are configured for SSL, including DMZ instances. Refer to "Configuring SSL".
Perform a software only install for Oracle Beehive Integration for Zimbra.
Replace orapki and Oracle Wallet Manager (owm) binaries of Oracle Beehive Integration for Zimbra with those from your Oracle Beehive instance. Create a new wallet located in <Oracle Beehive Integration for Zimbra home>/Apache/Apache/conf/ssl.wlt/default. Refer to "Step 1: Enabling Auto Login Mode for Default Wallet" for directions to create a wallet.
If you are using self-signed (CA-signed) certificates for your application tier wallets, perform this step.

Remove the test certificates using Oracle Wallet Manager from the wallets in <Oracle Beehive Integration for Zimbra home>/opmn/conf/ssl.wlt/default and <Oracle Beehive Integration for Zimbra home>/Apache/Apache/conf/ssl.wlt/default, if any. The order of removal should be (1) user certificate, (2) certificate request, and (3) trusted certificate. Refer to "Creating CA-Signed Certificate and Importing it into Wallet" for information about CA-signed certificates.
Run the Config Wizard for Oracle Beehive Integration for Zimbra and complete the configuration.
Configure TLS for Oracle Beehive Integration for Zimbra. Perform "Step 2: Configuring Oracle Beehive Instance to Use Oracle Wallet". (Note that you already created an auto-login wallet for Oracle Beehive Integration for Zimbra in a previous step.
If you are using self-signed (CA-signed) certificates for your application tier wallets, perform this step.

Remove the test certificates using Oracle Wallet Manager from the wallets in <Oracle Beehive Integration for Zimbra home>/Apache/Apache/conf/ssl.wlt/default, if any.

Note:

Oracle Beehive Integration for Zimbra installation will fail if the default test certificates are still in the wallets of your Oracle Beehive instances. Configure TLS on the failed Oracle Beehive Integration for Zimbra home, as described in "Configuring TLS with Oracle Wallet", and click Retry from the Install Wizard.

Changing HTTP Port for Oracle Beehive Integration for Zimbra

If Oracle Beehive Integration for Zimbra and your Oracle Beehive instance are on different hosts, then use the command beectl modify_port --protocol HTTP to change the HTTP port. However, do not use this command if Oracle Beehive Integration for Zimbra and your Oracle Beehive instance are on the same host and installed in separate Oracle homes; this will configure all your Oracle Beehive instances to use the same port, which will create a port conflict.

If Oracle Beehive Integration for Zimbra and your Oracle Beehive instance are on the same host, change the HTTP port for Oracle Beehive Integration for Zimbra by changing the HTTP port of your Oracle Beehive instance.

Note:

If you want to change the HTTP port number of your Oracle Beehive instance to a value less than 1024, refer to "Changing HTTP Port" in "Oracle Beehive Post-Installation Procedures".

Determine the name of the listening component and property name of the port you want to change. Run the beectl list_ports command to list all available ports (the --format option is optional):

beectl list_ports --format xml

...
   <row>
      <column name="Protocol">HTTP</column>
      <column name="Listening Port">7777</column>
      <column name="Virtual Port">7777</column>
      <column name="Defining Component">ohs_site1.example.com</column>
      <column name="Property Name">HttpListenPort</column>
      <column name="Listening Component">ohs_site1.example.com</column>
   </row>
   <row>
      <column name="Protocol">HTTPS</column>
      <column name="Listening Port">4443</column>
      <column name="Virtual Port">4443</column>
      <column name="Defining Component">ohs_site1.example.com</column>
      <column name="Property Name">HttpSslListenPort</column>
      <column name="Listening Component">ohs_site1.example.com</column>
   </row>

In the previous example, the HTTP (and HTTPS) listening component is ohs_site1.example.com. The property name of the HTTP port is HttpListenPort, and the property name of the HTTPS port is HttpSslListenPort.

Change the listening port with the beectl modify_property command with the appropriate listening component and property name. The following example changes the HTTP port to 7779:
```
beectl modify_property
  --component ohs_site1.example.com --name HttpListenPort --value 7779
```
Change the HTTP (or HTTPS) port number in the _VIRTUAL_SERVER component. The following example changes the HTTP port number. (Use the property name HttpSslPort to change the HTTPS port number):
```
beectl modify_property --component _VIRTUAL_SERVER --name HttpPort --value 7779
```
Activate configuration and commit changes:
```
beectl activate_configuration
beectl modify_local_configuration_files
```
Note:
The beectl modify_local_configuration_files command will ask you to run this command on all your other instances. Do not run this command on all your other instances at this time. For each instance, perform steps 1 to 3 before running the beectl modify_local_configuration_files command.

Tuning Oracle Beehive to Improve Performance of Oracle Beehive Integration for Zimbra

Depending on your Oracle Beehive deployment, you may perform the following to improve the performance of Oracle Beehive Integration for Zimbra:

Disabling ORMIS
Disabling SSL

Disabling ORMIS

Oracle Remote Method Invocation over Secure Socket Layer (ORMIS) is ORMI over SSL. For more information about ORMIS, refer to "Using ORMI/SSL (ORMIS) in OC4J" in Chapter 6, "Using Remote Method Invocation" in Oracle Containers for J2EE Services Guide.

By default, for security purposes, Oracle Beehive is ORMIS enabled. Consequently, SSL is used for all RMI communication, which adds a significant overhead to your system. ORMIS is required if you configure Oracle Beehive with SSL as described in "Configuring SSL".

You may not require ORMIS if you have no requirement to encrypt traffic between your application tiers and absolutely no intrusion or eavesdropping risk exists among your application tiers. You may disable ORMIS by following the steps described in the section "Disable ORMIS" in "Configuring TLS with Oracle Wallet".

Disabling SSL

Disabling SSL can improve the performance of Oracle Beehive Integration for Zimbra. If you do not require SSL in your Oracle Beehive deployment, follow these steps to disable SSL:

Retrieve the identifier for the component HttpServerCluster:
```
beectl list_components --type HttpServerCluster
```

Set the value of HttpServerSslEnabled in the HttpServerCluster component to false, then run beectl modify_local_configuration_files:

beectl modify_property
  --component <HttpServerCluster identifier retrieved from previous step>
  --name HttpServerSslEnabled
  --value false

Activate the configuration and commit changes:

beectl activate_configuration
beectl modify_local_configuration_files